SOC 2 Compliance

‍Overview

ioMoVo is committed to ensuring the security, confidentiality, and availability of our customers' data. Our previous SOC 2 Type II report has reached the end of its coverage period, and our next audit began on 3 August 2026. We would rather tell you exactly where we stand than leave you to find out later. Request our SOC 2 report and current audit status and we will send you the scope, the expected issue date, and our supporting security documentation.

What is SOC 2?

SOC 2, developed by the American Institute of Certified Public Accountants (AICPA), is a set of criteria for managing customer data based on five "trust service principles", namely security, availability, processing integrity, confidentiality, and privacy. This compliance is crucial for service organizations that store customer data in the cloud, ensuring they manage data securely to protect the interests of their organization and the privacy of their clients.

Independent Service Auditor’s Report

A SOC 2 Type II report provides an independent assessment of ioMoVo's control environment. Our controls are designed to meet the trust service criteria for Security, Confidentiality, and Availability. The report from our current audit will be available to customers and active evaluators once it is issued.

Key Elements of Our Security Program

1. Security
   • Access Control: Ensuring only authorized personnel can access the system
   • Security Configuration: Implementation of strong passwords, account lockout mechanisms, and secure configuration of IT assets.
   • Vulnerability Management: Regular vulnerability assessments and penetration tests to identify and address potential security risks.
2. Confidentiality
   • Data Retention and Disposal: Policies for the secure retention and disposal of data as soon as it is no longer needed.
   • Confidentiality Agreements: All employees sign confidentiality agreements upon joining, and these are reviewed annually​.
   • Customer Communication: Changes in confidentiality practices are communicated to customers, and incidents impacting external users are promptly reported.
3. Availability
   • System Monitoring: Continuous monitoring of system performance and capacity to ensure high availability.
   • Disaster Recovery and Business Continuity: Comprehensive disaster recovery plans, including regular testing and validation of backup and recovery processes.

Description of ioMoVo Services

ioMoVo provides an advanced Digital Assets Platform that leverages artificial intelligence to enhance collaboration, asset management, and asset search processes. Our services include ioCloud, ioHub, ioAI, ioPortal, and ioFlow.

Control Environment

The internal control environment at ioMoVo reflects our commitment to security and operational excellence. Our policies, procedures, and organizational structure ensure that controls are implemented effectively to meet our security, confidentiality, and availability commitments.

Integrity and Ethical Values

· Code of Conduct: All employees are required to adhere to our code of conduct, which is reinforced through regular training and performance evaluations​.

· Management Philosophy: Our executive management team regularly assesses risks and ensures that appropriate measures are in place to mitigate them.

Trust Services Criteria

Our SOC 2 audit covers the following trust service principles:

1. Security: Measures to protect against unauthorized access.

2. Confidentiality: Procedures to ensure confidential information is protected.

3. Availability: Ensuring the system is available for operation and use as committed.

Request the report

We share our SOC 2 report and supporting security documentation with customers, active evaluators, and their security teams, under the confidentiality terms set out on the request form. Request our SOC 2 report, and a person will get back to you, usually within one business day. If your security team has questions the documentation does not answer, say so on the form and we will address them directly.